Provide secrets for engelsystem VM from pass

playbooks/templates/configs/engelsystem/compose.yaml.j2

@@ -0,0 +1,48 @@
+---
+version: "3.6"
+services:
+  es_server:
+    image: es_server
+    build:
+      context: /home/chaos/engelsystem
+      dockerfile: /home/chaos/engelsystem/docker/Dockerfile
+    environment:
+      MYSQL_HOST: es_database
+      MYSQL_USER: engelsystem
+      MYSQL_PASSWORD: engelsystem
+      MYSQL_DATABASE: engelsystem
+      APP_NAME: CCCamp2023 Alternative Engelsystem
+      APP_URL: https://aes.ccchh.net
+      MAIL_DRIVER: smtp
+      MAIL_FROM_ADDRESS: aes@send-only-mail.ccchh.net
+      MAIL_HOST: send-only-mailserver.ccchh.net
+      MAIL_PORT: 465
+      MAIL_ENCRYPTION: tls
+      MAIL_USERNAME: aes
+      MAIL_PASSWORD: {{ lookup("community.general.passwordstore", "vm-secrets/engelsystem/MAIL_PASSWORD", create=false, missing="error") }}
+    ports:
+      - "5080:80"
+    networks:
+      - database
+      - internet
+    depends_on:
+      - es_database
+  es_database:
+    image: mariadb:10.2
+    environment:
+      MYSQL_DATABASE: engelsystem
+      MYSQL_USER: engelsystem
+      MYSQL_PASSWORD: engelsystem
+      MYSQL_RANDOM_ROOT_PASSWORD: 1
+      MYSQL_INITDB_SKIP_TZINFO: "yes"
+    volumes:
+      - db:/var/lib/mysql
+    networks:
+      - database
+volumes:
+  db: {}
+
+networks:
+  database:
+    internal: true
+  internet: